Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          5cYVEnXiKiFL8ORIBq6Qsksv8NE3zghKwm+kZEoTSrs=
Subject key identifier:   F2:79:FF:85:A8:B4:1A:EB:58:7B:33:7C:3D:D5:46:66:25:8C:DA:2D
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       4C6AA584DA6968E04B83A53A2A5621D8BEF5B1A8
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:30 +0000
ROA not before:           Wed 03 Apr 2024 19:43:30 +0000
ROA not after:            Wed 02 Apr 2025 19:48:30 +0000
asID:                     262617
IP address blocks:        177.87.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6a:a5:84:da:69:68:e0:4b:83:a5:3a:2a:56:21:d8:be:f5:b1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:30 2024 GMT
            Not After : Apr  2 19:48:30 2025 GMT
        Subject: CN=F279FF85A8B41AEB587B337C3DD54666258CDA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:37:22:98:5c:55:2d:b8:a4:07:7b:f3:bd:
                    57:aa:1e:aa:69:1d:c6:93:9b:0e:e7:79:46:26:c5:
                    e2:0e:1e:03:d6:07:fa:d1:78:ac:f3:82:ba:a4:9e:
                    bb:25:8a:b2:80:46:5d:96:4a:d6:ff:44:1e:f5:71:
                    3f:f5:6e:59:35:b5:5d:d9:da:1d:35:62:6f:20:bb:
                    c8:97:15:e6:b9:22:ff:1e:69:54:82:fa:59:d9:74:
                    78:39:70:00:db:b4:de:05:85:20:21:b6:90:cb:fa:
                    8f:eb:92:fb:6c:ac:5a:0e:48:c6:f8:1a:bf:c1:14:
                    82:b6:b1:e9:ab:9d:35:e7:30:f7:a1:00:f9:f1:98:
                    b4:6f:1d:cf:36:fb:29:9a:84:43:e1:95:2e:ab:63:
                    f3:7f:5d:70:13:6c:5f:df:90:35:06:63:59:12:29:
                    16:17:94:46:ca:96:7d:64:c4:ea:a3:6a:47:d1:94:
                    7b:3d:be:ed:aa:75:46:b7:de:05:e2:e0:44:bc:bf:
                    9c:68:d5:ec:df:ec:9b:0b:1e:3a:7e:28:ad:5e:51:
                    f4:67:6a:01:1a:d7:6e:75:58:28:03:e2:3c:c3:5b:
                    26:e1:95:e4:63:73:0c:f3:82:8e:60:51:19:a9:09:
                    eb:40:d9:9a:83:b3:ff:64:dc:f5:46:0f:e0:cc:9f:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:79:FF:85:A8:B4:1A:EB:58:7B:33:7C:3D:D5:46:66:25:8C:DA:2D
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e382e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:9b:dd:c0:5d:c2:47:73:af:88:78:b3:3a:3a:0b:b0:a5:
         c3:8c:cd:71:87:ff:d1:f4:09:50:a0:6f:11:57:47:16:bf:42:
         fc:4b:5c:6a:cb:b1:b0:bf:99:11:1b:06:c9:d6:45:3d:0e:6d:
         e0:cf:f4:63:94:a3:be:ae:d6:92:40:a5:30:63:46:ce:de:34:
         aa:e9:3c:a5:ea:e6:1c:82:cf:f8:13:a0:90:76:69:80:74:7e:
         ea:27:b0:3a:45:14:47:71:ee:97:2c:d8:e6:76:69:03:43:25:
         26:86:64:ff:2a:95:e4:02:3e:23:14:a7:99:8e:c7:5d:e3:ad:
         68:9e:5b:3a:e1:62:5c:dc:40:18:b6:d7:b4:6b:fd:f8:49:ce:
         8e:73:e4:ec:34:9f:6a:bc:7b:0a:49:20:64:12:48:c2:78:e9:
         30:1a:c4:00:ae:60:fe:fe:3a:71:93:c5:e5:f5:af:4c:20:58:
         7e:2e:46:73:36:af:a8:0d:99:20:e0:d1:1d:55:f5:1b:a3:c3:
         35:05:26:a5:d3:a4:db:87:df:ef:46:a1:0b:95:cd:e1:9e:44:
         16:bf:d7:16:3a:04:2a:4d:a8:de:8f:a1:01:55:4a:0f:56:d1:
         9a:86:52:3c:82:2c:df:43:24:73:f5:f5:b4:2b:d3:df:33:6f:
         ee:f9:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org